$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: VA6iSLwaRMxucH98wnpm697h+NpluAx8CzQPgkE6AcY= Subject key identifier: 97:02:68:34:14:C2:ED:A0:7C:F4:AE:56:40:9E:51:89:78:55:53:2E Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 0154 Signing time: Thu 03 Jul 2025 04:20:54 +0000 Manifest this update: Thu 03 Jul 2025 04:20:53 +0000 Manifest next update: Thu 10 Jul 2025 04:20:53 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: b9ddjEVbWHlMcrW4juv90mtAjAr/6+vGZsN5jT7XiXE=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jul 3 04:20:53 2025 GMT Not After : Jul 10 04:20:53 2025 GMT Subject: CN=68660525-37f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:72:ca:f5:94:58:d6:70:f9:6b:95:c2:88: 69:9d:e5:7c:29:00:32:71:67:01:c2:56:56:78:5a: 17:54:49:91:c8:2a:7c:67:db:c6:f8:98:ca:bd:2a: 4c:88:0a:66:8f:3f:41:79:f8:cc:c1:c3:ec:37:4b: 1f:27:45:98:51:57:05:92:9a:d4:84:eb:16:ac:30: 46:46:08:4d:fe:cd:01:22:d3:6c:cc:ec:ce:50:ec: 05:63:25:e3:b4:0b:37:e6:14:77:8b:ac:49:57:bd: 54:b1:22:b0:70:91:3d:d4:72:e7:5e:30:2e:18:da: 61:c1:55:d8:29:09:10:af:40:8d:ff:0c:d3:22:85: a4:00:6a:c3:67:32:d1:c9:00:a7:0a:f0:16:67:ac: c1:18:15:a0:b8:70:26:8c:e8:f0:8e:9e:79:c3:62: 26:ea:ec:23:1c:c7:3f:be:86:78:ef:c1:5b:c3:44: 64:92:78:15:f2:fd:29:28:19:f9:25:c1:f3:4b:a6: ea:ba:f7:83:bd:40:01:3e:3b:70:41:99:c8:47:d7: 63:f5:45:73:9a:44:29:95:fe:c9:f5:7e:f9:6e:96: 92:91:d2:8c:7d:fd:7c:5e:16:22:54:da:da:dc:6f: 3e:a6:34:56:da:02:81:44:38:3e:06:54:3d:1c:10: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:68:34:14:C2:ED:A0:7C:F4:AE:56:40:9E:51:89:78:55:53:2E X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:36:54:c0:cf:a2:c5:0d:c0:74:18:f4:e6:49:70:98:70:bc: b6:61:8a:ce:f9:b6:02:81:fa:16:30:9b:74:46:9b:c6:a3:0f: af:96:5a:29:a7:ff:37:9d:b9:11:4b:68:a2:ab:05:56:8b:ae: 53:a4:6a:a3:e7:21:a5:66:57:f2:2b:2e:d0:0f:35:3c:39:50: e5:86:f1:c7:17:54:14:f1:63:9d:13:52:45:6c:0d:ea:9f:73: 43:a9:cf:dc:4e:38:b8:69:63:09:8a:eb:87:03:e3:94:36:7c: 2c:09:cd:3a:10:79:5d:ff:ba:2c:52:37:2f:c5:fa:f5:f6:92: 0b:a1:c9:45:e5:6a:f8:a3:2f:6d:69:ce:53:f1:3f:53:90:29: a8:fe:15:cd:1b:da:2a:7c:68:98:ae:8b:af:96:76:d0:7f:43: 6c:a5:d9:3d:a1:7e:56:c4:42:1b:9e:5b:f2:50:12:28:7c:c8: 26:af:bb:cb:85:5c:9f:89:31:50:2b:de:fd:1a:8d:7f:3b:d5: 39:00:08:5b:e3:c3:26:6c:1c:22:47:76:0e:e2:4c:5a:48:47: 32:4d:8f:31:30:dd:be:30:2f:6b:82:d8:cb:e5:81:5d:00:94: 95:7b:2d:25:a0:03:cd:06:a7:b5:cd:ca:f0:ee:c8:32:d2:34: ff:1f:de:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNzAzMDQyMDUzWhcNMjUwNzEwMDQyMDUzWjAYMRYwFAYD VQQDEw02ODY2MDUyNS0zN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHpyyvWUWNZw+WuVwohpneV8KQAycWcBwlZWeFoXVEmRyCp8Z9vG+JjKvSpM iApmjz9BefjMwcPsN0sfJ0WYUVcFkprUhOsWrDBGRghN/s0BItNszOzOUOwFYyXj tAs35hR3i6xJV71UsSKwcJE91HLnXjAuGNphwVXYKQkQr0CN/wzTIoWkAGrDZzLR yQCnCvAWZ6zBGBWguHAmjOjwjp55w2Im6uwjHMc/voZ478Fbw0RkkngV8v0pKBn5 JcHzS6bquveDvUABPjtwQZnIR9dj9UVzmkQplf7J9X75bpaSkdKMff18XhYiVNra 3G8+pjRW2gKBRDg+BlQ9HBBO1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcCaDQU wu2gfPSuVkCeUYl4VVMuMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENlTAz6LFDcB0GPTmSXCYcLy2YYrO+bYCgfoWMJt0RpvGow+vllop p/83nbkRS2iiqwVWi65TpGqj5yGlZlfyKy7QDzU8OVDlhvHHF1QU8WOdE1JFbA3q n3NDqc/cTji4aWMJiuuHA+OUNnwsCc06EHld/7osUjcvxfr19pILoclF5Wr4oy9t ac5T8T9TkCmo/hXNG9oqfGiYrouvlnbQf0Nspdk9oX5WxEIbnlvyUBIofMgmr7vL hVyfiTFQK979Go1/O9U5AAhb48MmbBwiR3YO4kxaSEcyTY8xMN2+MC9rgtjL5YFd AJSVey0loAPNBqe1zcrw7sgy0jT/H97I -----END CERTIFICATE-----Generated at Fri Jul 4 15:12:44 2025 by rpki-client